As a seasoned cybersecurity professional, I bring expertise in public and private cloud security, and enterprise network security including hands-on on security products of Cisco, Fortinet, Kaspersky, etc, cybersecurity, and IT audit, including operational technology. Proficient in web and network penetration testing and Governance, Risk, and Compliance (GRC), I have extensive experience in ISO 27001 implementation, covering gap analysis, asset identification, risk assessment, and vulnerability mitigation. My familiarity with diverse frameworks such as NIST, ISACA, ISO, ITU, NCA, and compliance laws, including GDPR and HIPAA, is complemented by publications in reputable journals and IEEE conferences, verified at Google Scholar.
I have a master's degree in Information Security and a bachelor's degree in Telecommunications. I also have a team of professional network engineers who are currently working in different parts of the world. We can do this work as per your requirements.
Committed to staying updated, I hold certifications like Web Application Penetration Testing by EC-Council and Attack Methodology in IT & ICS by the U.S. Dept. Of Homeland Security, and NSE 1 and NSE 2 by Fortinet.
Best regards,
Yasir Iqbal